Mandrakesoft Mandrake Linux Corporate Server vulnerabilities, page 3
53 vulnerabilities
Known vulnerabilities in Mandrakesoft Mandrake Linux Corporate Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2004-0974debiannetatalk+4
EPSS score0.39%
The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.CVE-2004-0581gnuksymoops+2EPSS score0.37%
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.CVE-2004-0805debianmp3gain+4EPSS score3.79%
Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.CVE-2004-0497conectivalinux+17EPSS score0.80%
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.CVE-2004-0559debianwebmin+4EPSS score0.36%
The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.CVE-2004-0802conectivalinux+16EPSS score3.43%
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.CVE-2004-0977debianpostgresql+18EPSS score0.45%
The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.CVE-2004-0975debianopenssl+4EPSS score0.41%
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.CVE-2004-0817conectivalinux+19EPSS score4.87%
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.CVE-2004-0983debianruby+12EPSS score1.90%
The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.CVE-2004-0496linuxlinux_kernel+7EPSS score0.39%
Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool.CVE-2002-0083conectivalinux+10EPSS score14.69%
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.CVE-2002-0638hpsecure_os+4EPSS score0.53%
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.